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Top Stories 

• Nearly 200,000 customers lost power in Seattle November 2 due to powerful winds. - 
Seattle Times (See item 1) 

• Financial and private information of members of Congress, celebrities, and business 
executives was found to be exposed by cybercriminals after they compromised a limousine 
service. - Krebs on Security (See item 6) 

• The gunman who opened fire on and killed a TSA official at the Los Angeles International 
Airport remains in the hospital heavily sedated and under close guard. - Associated Press 
(See item 13) 

• Twenty-one children and one bus driver were injured after a Devall Middle School and 
Chamberlin Elementary School bus crashed in Baton Rouge Parish, Louisiana. - Baton 
Rouge (See item 31) 
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Energy Sector 



1. November 2, Seattle Times - (Washington) Thousands lose power as powerful winds 
hit region. Crews worked to restore service as utility companies around the region 
reported nearly 200,000 customers lost power all over Seattle November 2 due to 
strong winds. 

Source: http://blogs.seattletimes.com/today/2013/ll/west-seattle-power-outage- 
expected-to-continue-into-afternoon/ 

2. November 1, Detroit News - (Michigan) Power restored to thousands across 
southeast Michigan. Utility crews worked to restore service after DTE Energy Co. 
reported nearly 32,000 customers lost power, while over 25,000 of CMS Energy 
Corp.’s Consumers Energy customers lost power November 1 due to high winds 
throughout southeast Michigan. 

Source: http ://w w w .detroitnews .com/article/20 131101 /METROQ6/3 1101 007 3/36K- 

without-power-Michigan-Metro-Detroit-has-record-Halloween- 

rainfall?odyssev=tab%7Ctopnews%7Ctext%7CFRONTPAGE 

3. November 1, Associated Press - (North Dakota) Feds allow Tesoro to restart North 
Dakota pipeline. The federal Pipeline and Hazardous Materials Safety Administration 
allowed Tesoro Corp. to restart a North Dakota crude oil pipeline November 1 after it 
was shut down September 29 after an estimated 20,600 barrels leaked due to a rupture 
in the pipeline. The company received and accepted a safety order issued by the agency 
that set conditions to restart the pipeline. 

Source: http://swampland.time.com/2013/ll/01/feds-allow-tesoro-to-restart-north- 
dakota-pipeline/ 
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Chemical Industry Sector 

Nothing to report 
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Nuclear Reactors, Materials, and Waste Sector 

Nothing to report 
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Critical Manufacturing Sector 



4. November 2, Associated Press - (National) Honda recalls 344,000 Odyssey minivans 
in U.S. Honda announced a recall of 344,000 model year 2007-2008 Honda Odyssey 
vehicles due to a software and parts problem that can lead to unexpected braking. A 
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part to fix the issue will be available in early 2014, and the company issued instructions 
on how to prevent the problem in the meantime. 

Source: http://www.usatodav.com/storv/monev/cars/2013/ll/02/honda-odyssev- 
minivan-recall/3370177/ 



5. November 1, U.S. Department of Labor - (Connecticut) U.S. Labor Department’s 
OSHA cites West Hartford, Conn., metal finishing plant for 15 repeat and serious 
hazards. Har-Conn Chrome Co. Inc. was cited by the U.S. Department of Labor’s 
Occupational Safety and Health Administration for six repeat and nine serious safety 
and health violations at its West Hartford facility. Proposed fines totaled $66,220. 
Source: 

https://www.osha.gov/pls/oshaweb/owadisp.show document?p table=NEWS RELEA 
SES&p id=25035 
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Defense Industrial Base Sector 



Nothing to report 
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Financial Services Sector 

6. November 4, Krebs on Security - (National) Hackers take limo service firm for a 
ride. CorporatcCarOnl i ne, a limousine and town car service, was found to have been 
the target of cybercriminals after a plain text archive of more than 850,000 customers’ 
credit card numbers, names, addresses, transaction records, and other private 
information was discovered on the same servers where stolen information from PR 
Newswire and Adobe Systems Inc. was found. Customers whose information was 
exposed included members of Congress, celebrities, and business executives. 

Source: http://krebsonsecurity.eom/2013/l 1/hackers-take-limo-service-firm-for-a-ride/ 

7. November 3, Forum of Fargo-Moorhead - (North Dakota) Fargo truck stop 
accountant accused of stealing $190K from store ATMs. A bookkeeper at a Fargo 
truck stop was accused of stealing more than $190,000 from ATMs at the truck stop 
over several years by allegedly embezzling the money and falsifying records to avoid 
detection. 

Source: http://www.duluthnewstribune.com/event/article/id/282494/group/homepage/ 

8. November 2, Everett Herald - (Washington) ‘Phony Pony Bandit’ admits to armed 
robberies. A man known as the “Phony Pony Bandit” pleaded guilty November 1 to 
four counts of bank robbery in connection with the armed robbery of four banks in the 
Stanwood area of Washington in 2012. 

Source: http://www.heraldnet.com/article/20131 102/NEWS01/71 1029937/Phony- 
Pony-Bandit-admits-to-armed-robberies 
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9. November 1, North Country Gazette - (New York) 4 nabbed in skimmer scam of 
LIRR customers. Authorities announced November 1 that four Romanian nationals 
were arrested for allegedly using skimming devices and hidden cameras at ticket 
vending machines to steal the payment card information of thousands of MTA Long 
Island Rail Road customers. Cameras and skimmers were found on machines in 
Nassau, Queens, and Westchester counties. 

Source: http://www.northcountrygazette.Org/2013/l 1/01/skimmer scam/ 

10. November 1, Softpedia - (International) Liberty Reserve co-founder pleads guilty. 
The co-founder of Liberty Reserve pleaded guilty to money laundering, operating an 
unlicensed money transmitting business, and other charges in his role in founding and 
running the service that allowed criminals to make illegal transactions. 

Source: http://news.softpedia.com/news/Liberty-Reserve-Co-Founder-Vladimir-Kats- 
Pleads-Guiltv-to-Money-Laundering-396463.shtml 

11. November 1, U.S. Securities and Exchange Commission - (California) SEC obtains 
asset freeze in California-based real estate investment scheme. The U.S. Securities 
and Exchange Commission announced November 1 an asset freeze and fraud charges 
against Pasadena-based Velocity Investment Group and other entities and their owners, 
for allegedly raising more than $150 million in a Ponzi-like investment scheme. 

Source: 

http://www.sec.gOv/News/PressRelease/Detail/PressRelease/1370540220789#.Une26f 

mkrSk 
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Transportation Systems Sector 

12. November 4, Macon Telegraph - (Georgia) Bees swarm in Forsyth after 1-75 
accident. An accident involving a semi-truck carrying millions of bees that overturned 
on Interstate 75 in Monroe County near Atlanta November 3 closed two lanes of traffic 
for several hours while crews cleaned spilled honey off the road. 

Source: http://www.macon.com/2013/ll/03/2753938/bees-swarm-in-forsyth-after- 
accident.html 

13. November 4, Associated Press - (California) LAX shooter remains heavily sedated, 
under guard. A man who opened fire on employees at the Los Angeles International 
Airport on November 1, killing a Transportation Security Administration (TSA) officer 
and wounding three others, is reported to have acted alone in a conscious decision to 
try to kill TSA officers. The FBI continues to investigate the incident. 

Source: http://news.msn.com/crime-iustice/gunman-told-police-he-acted-alone-in-lax- 
shooting 

14. November 4, Associated Press - (Wisconsin) Skydiving planes collide in Wis.; all 
survive. An accident occurred when two planes carrying nine skydivers collided in the 
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air near Lake Superior in Wisconsin October 31. All skydivers and pilots survived the 
crash and the Federal Aviation Administration is investigating the incident. 

Source: http://news.msn.com/us/skvdiving-planes-collide-in-wis-all-survive 

15. November 4, Rochester Post-Bulletin; Detroit Free Press - (Minnesota) Questions 
linger about fatal plane crash near Caledonia. A fatal aircraft accident involving a 
small plane that crashed in a field south of Caledonia in southeastern Minnesota left 
three people dead and one person in critical condition November 1. The Federal 
Aviation Administration and National Transportation Safety Board are investigating. 
Source: http://www.postbulletin.com/news/local/questions-linger-about-fatal-plane- 
crash-near-caledonia/article 1 9fd7 189-1027-59 1 b-bc7c-b46eecd5 2aba.html 



16. November 4, KGW 8 Portland - (Oregon) 1-84 reopened after HAZMAT spill near 
Baker City. An accident involving a semi-truck carrying 4,200 gallons of 
Tetramethylommonium Hydroxide crashed on Interstate 84 near Baker City, closing 
the freeway in both directions from Baker City to Ontario for about 9 hours while 
HAZMAT teams cleaned up thousands of gallons of chemicals that spilled November 
3. 

Source: http://www.kgw.com/news/local/I-84-reopened-after-HazMat-spill-near-Baker- 
City-2304 1 660 1 .html 



17. November 3, Associated Press - (Alabama) Birmingham, Ala., airport reopens after 
threat. A bomb threat found on a note in a bathroom at the Birmingham-Shuttlesworth 
International Airport in Birmingham resulted in about a dozen flight delays or 
diversions and a 2 hour evacuation of hundreds of passengers November 3. 
Investigators cleared the terminal and no threat was found. 

Source: http://www.kttc.com/story/23864575/birmingham-ala-airport-reopens-after- 
threat. 



For another story, see item 9 
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Food and Agriculture Sector 

18. November 3, U.S. Food and Drug Administration - (California; Nevada) Ghiringhelli 
Specialty Foods issues voluntary alert on undeclared allergens in Caesar salad. 
Ghiringhelli Specialty Foods of Vallejo, California, voluntarily recalled one specific lot 
of Trader Giotto’s Caesar Salad November 1 because it may not list wheat, soy, and 
fish in the ingredients. The recall was initiated after an incorrect bottom label was 
discovered on some packages. 

Source: http://www.fda.gov/Safety/Recalls/ucm373500.htm 

19. November 3, KHTS AM 1220; SCVTV 20 Santa Clarita - (California) CalArts closes 
campus as precaution after outbreak of illness. The Los Angeles County Department 
of Public Health investigated 16 cases of illnesses suspected to be norovirus October 31 
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that cancelled all classes and campus activities through November 4. The campus was 
scheduled to reopen November 5. 

Source: http://hometownstation.com/santa-clarita-news/calarts-closes-campus- 
precaution-after-outbreak-illness-38736 

20. November 2, KCAU 9 Sioux City - (Iowa) Some IA counties quarantined due to 
beetles. The Iowa Department of Agriculture and Land Stewardship announced on 
November 1 a regional quarantine of firewood and ash products moving within 25 
counties in eastern Iowa to prevent the spread of emerald ash borer, which was first 
detected in Iowa in May 2010. 

Source: http://www.kcautv.com/storv/23861180/some-ia-counties-quarantined-due-to- 
beetles 

21. November 1, The Hill - (International; National) USDA adjusts mad cow rules. The 
U.S. Department of Agriculture’s Animal and Plant Health Inspection Service issued 
new regulations November 1 aligning federal protections against bovine spongiform 
encephalopathy, also known as mad cow disease, with internationally accepted trade 
standards set by the World Organization for Animal Health. 

Source: http://thehill.com/blogs/regwatch/business/189028-usda-hews-to-intemational- 
standards-on-beef-trade 

22. November 1, The Grower - (Florida) USDA confirms new disease in Florida citrus. 
The U.S. Department of Agriculture (USDA) confirmed three cases of what they call a 
sweet orange scab-like disease on citrus samples from Florida. USDA pathologists are 
conducting further tests to identify the organism’s origin. 

Source: http://www.thegrower.com/issues/citrus-vegetable/117876289.html 

23. October 31, U.S. Food and Drug Administration - (National) World Class 
Distribution issues voluntary allergy alert on undeclared soy in southwest salad. - 

World Class Distribution of Fontana, California, voluntarily recalled one specific lot of 
Trader Joe’s Southwest Salad because it may not list soy in the ingredients. The recall 
was initiated after an incorrect bottom label was discovered on some packages. 

Source: http://www.fda.gov/Safety/Recalls/ucm373192.htm 
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Water and Wastewater Systems Sector 

24. November 3, WICU 12 ErieAVSEE 35 Erie - (Pennsylvania) Upgrades finished at 
Erie’s water treatment plant. Erie’s Wasielewski Water Treatment plant is expected 
to be fully operational by mid-November, after several upgrades that allow the plant to 
clean and pump up to 45 million gallons of water per day and utilize a membrane 
filtration system. 

Source: http://www.erietvnews.com/storv/23864802/upgrades-finished-at-water- 
treatment-plant 

25. November 1, Buffalo News - (New York) Lockport water supply line to be shut for 



- 6 - 



inspection. The city of Lockport is preparing to shut down a water supply line from the 
Niagara River for 3-5 days, in order to test whether the line is in good enough condition 
to also carry treated drinking water from North Tonawanda, pending repairs to fix a 
broken line that brings water from the Niagara County Water District. 

Source: http://www.buffalonews.com/citv-region/lockport/lockport-water-supplv-line- 
to-be-shut-for-inspection-20 131101 

26. October 31, KTBC 7 Austin - (Texas) Flooding causes wastewater to spill into 
Austin waterways. Heavy rainfall in the Austin area October 3 1 impacted wastewater 
treatment plants by redirecting flows to protect plant infrastructure, causing damage to 
lift stations, and forcing the shutdown of one plant. Wastewater spilled from affected 
plants and lift stations spilled into several nearby waterways. 

Source: http://www.mvfoxaustin.com/story/23843816/flooding-causes-wastewater-to- 
spill-into-austin-waterways 
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Healthcare and Public Health Sector 

27. November 2, Corx’allis Gazette-Times - (Oregon) Samaritan fined for improper 
disposal of patient files. Samaritan Health Services was fined by the Oregon 
Department of Consumer and Business Services following a July incident where a 
patient found approximately 1,222 patient files containing personal information that 
were tossed into an unlocked container behind Samaritan medical offices in Corvallis. 
The fine was reduced to $1,000 following an agreement that Samaritan comply with 
Oregon law regarding properly disposal of patient records for the next 5 years. 

Source: http://www.gazettetimes.com/news/local/samaritan-fined-for-improperlv- 
disposing-patient-files/article 3f7dOa8e-43 14-1 Ie3-8c4f- 
0019bb2963f4.html?comment form=true 



28. November 1, United Press International - (Indiana) Indiana assisted living facility 
evacuated after collapse. Authorities are investigating after a partial roof collapse at 
the Hillcrest Community Center in Clinton October 31 that forced over 100 residents to 
evacuate and be placed in temporary housing until repairs are made. 

Source: http://www.upi.com/Top News/US/2013/1 1/01/Indiana-assisted-living- 
facility-evacuated-after-roof-collapse/UPI-3237 13833 12930/ 
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Government Facilities Sector 

29. November 4, WDTV 5 Weston - (West Virginia) Skyview Elementary School 

evacuated due to odor. Officials are investigating the source of an odor that forced the 
evacuation and closure of Skyview Elementary School in Morgantown November 4 
after a teacher reportedly became ill. 

Source: http://www.wdtv.com/wdtv.cfm?func=view&section=5-News&item=Skyview- 
Elementarv-School-Evacuated-Due-to-Odorl2647 
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30. November 2, Shamokin News-Item - (Pennsylvania) Northumberland County 
Courthouse evacuated after bomb scare. The Northumberland County Courthouse 
was evacuated and closed November 1 after a phoned bomb threat. Police searched the 
building and gave an all clear once nothing suspicious was found. 

Source: http://newsitem.com/news/northumberland-countv-courthouse-evacuated-after- 
bomb-threat-1. 1578900 

31. November 1, WAFB 9 Baton Rouge - (Louisiana) 22 injured in school bus crash, 77- 
year-old bus driver cited. Twenty-one children and one bus driver were transported to 
an area hospital with injuries after a Devall Middle School and Chamberlin Elementary 
School bus got into an accident in west Baton Rouge Parish November 1. 

Source: http://www.wafb.com/storv/23855136/2-school-buses-crash-airmed-transports- 
injured-to-hospital 

32. November 1, Hudson County Jersey Journal - (New Jersey) 27 car batteries stolen 
from Bayonne school buses: police. Police are investigating after 27 batteries were 
stolen from 9 Bayonne, New Jersey, school district buses October 30 while they were 
parked in a gated and locked lot near Route 440. 

Source: 

http://www.ni.com/hudson/index.ssf/2013/ll/thief snatches 21 car batteries from ba 
yonne boe buses police say.html 

33. November 1, Minnesota Department of Natural Resources - (Minnesota) Swinging 
bridge reopens at Jay Cooke State Park. The swinging bridge at Jay Cooke State 
Park in Minnesota reopened November 1 after being destroyed by flooding in June 
2012. The $1.1 million project to reconstruct the bridge included accessibility 
improvements and new design features. 

Source: http://news.dnr.state.mn.us/2013/ll/01/swinging-bridge-reopens-at-jay-cooke- 
state-park/ 

34. November 1, Minneapolis Star-Tribune - (Minnesota) East Ridge High School 
evacuated after gas leak. East Ridge High School in Woodbury was evacuated and 
classes were dismissed after a natural gas leak at a nearby construction site. Xcel 
Energy crews worked to repair the leak. 

Source: http://www.startribune.com/local/east/230247471.html 

35. November 1, WHEC 10 Rochester - (New York) Holley Central School District 
dismissing students early because of no power. Holley Central District in New York 
dismissed students and cancelled classes November 1 after a loss of power due to a 
semi-truck hitting a pole on Route 31, which took down a power line. 

Source: http://www.whec.com/news/stories/S3206619.shtml 

36. October 31, Baltimore Sun - (Maryland) Former employee of contractor obtained 
Balt. Co. worker’s personal data. Baltimore County notified over 12,000 current and 
former county employees after their personal information was found on the computer of 
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a former county information-technology contractor. The man is in custody in another 
State and will be extradited to Maryland to face charges in an unrelated case. 

Source: http://articles.bahimoresun.com/2013-10-31/news/bs-md-co-countv-emplovee- 
data-20 131031 1 count y-emplo yee-baltimore-county-ellen-kobler 

For another story, see item 6 
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Emergency Services Sector 

37. November 3, Associated Press - (New York) 5 NY firefighters headed to accident 
injured. Five firefighters from the Plattekill Fire Department were injured November 2 
after their fire engine flipped on its side to avoid crashing into an oncoming car while 
they were responding to a traffic accident. 

Source: http://www.vcstar.com/news/2013/nov/03/5-ny-firefighters-headed-to- 
accident-injured/ 
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Information Technology Sector 

38. November 4, Softpedia - (International) Adobe passwords leaked by hackers not 
properly encrypted. Researchers found that most customer passwords exposed during 
a recent Adobe breach could be decrypted due to the passwords being encrypted using 
Triple DES encryption, which could leave clues to the passwords in the hashes. Adobe 
confirmed the encryption use, but passwords created within the last year used a newer 
form of encryption and are not at risk. 

Source: http://news.softpedia.com/news/Adobe-Passwords-Leaked-by-Hackers-Not- 
Properly-Encrvpted-396858.shtml 

39. November 4, Help Net Security - (International) Fake Linkeln profile gathering info 
for targeted attacks. Websense researchers identified and reported an account on 
Linkedln likely being used by cybercriminals to collect information for targeted 
attacks. The account is used to view potential targets’ profiles and to attempt to redirect 
users to a dating Web site with an IP address and Autonomous System Number 
associated with past malicious activity. 

Source: http://www.net-securitv.org/secworld.php7idM5880 

40. November 1, Threatpost - (International) Upatre trojan downloads malware that 
downloads malware. Researchers at Microsoft’ s Malware Protection Center reported a 
spike in Win/32.Upatre infections in recent months, with a spam campaign distributing 
the trojan in malicious attachments. The trojan then downloads additional malware after 
it infects a system. 

Source: http://threatpost.com/upatre-troian-downloads-malware-that-downloads- 
malware 
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41. November 1, Softpedia - (International) Rogue Bing ads lure users to fake Snapchat 
installer. ThreatTrack Security researchers found that users searching for Snapchat 
using the Bing search engine are presented with sponsored ads that direct them to Web 
sites hosting fake Snapchat installers that contain malware. 

Source: http://news.softpedia.com/news/Rogue-Bing-Ads-Lure-Users-to-Fake- 
Snapchat- Installer-39643 1 .shtml 

For another story, see item 6 



Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT ISAC (Information Sharing and 
Analysis Center) Web site: https://www.it-isac.org 
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Communications Sector 

42. November 4, Telecompaper - (International) Claro gets USD 31.6 min FCC funds for 
broadband expansion. The Puerto Rico Federal Communications Commission 
awarded Claro $31.6 million from the Puerto Rico FCC’s Connect America Fund to 
boost and provide broadband network connection for over 40,700 unserved households 
and businesses in Puerto Rico. 

Source: http://www.telecompaper.com/news/claro-gets-usd-316-mln-fcc-funds-for- 
broadband-expansion— 977383 
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Commercial Facilities Sector 

43. November 4, Associated Press - (Indiana) 1 killed, several injured in Ind. church 
van crash. One person was killed and 1 1 others were injured after a car crashed into a 
church van heading back to the Jesus House of Prayer Temple November 3 in 
Indianapolis. 

Source: http://www.kpcnews.com/news/state/article b7ff91d4-a93b-59b7-b6c0- 
eO 1 8 5 ed4aead . html 

44. November 4 , KGBT 4 Harlingen - (Texas) Whataburger shutdown after fire causes 
“major damage.” Several fire crews worked to put out a fire at an Edinburg 
Whataburger that caused extensive damage and forced the restaurant to shut down. 
Source: http://www.vallevcentral.com/news/story.aspx?id=966889#.UnfOGPmkqM5 

45. November 2, Associated Press - (Ohio) 2 killed in shooting at Ohio sportsmen’s 
club. A suspected shooter was arrested after two people were shot and killed November 
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1 at the Carey Conservation Club in Wyandot County. 

Source: http://www.wfmi.com/storv/23858688/2-killed-in-shooting-at-ohio- 
sportsmens-club 

46. November 1, Reuters - (New York) Scaffolding fall injures three in New York’s 
Times Square. Three people were injured after scaffolding collapsed due to strong 
winds and heavy rains in New York City’s Times Square November 1. 

Source: http://wkzo.com/news/articles/2013/nov/01/scaffolding-fall-iniures-three-in- 
new-yorks-times-square/ 
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Dams Sector 

47. November 4, Bismarck Tribune - (Montana) Fort Peck Dam damage from 2011 
being repaired. Four projects totaling around $43.5 million continue to make repairs to 
the Fort Peck Dam in Montana after high water strained the Missouri River structure in 
2011. 

Source: http://bismarcktribune.com/news/state-and-regional/fort-peck-dam-damage- 
from-being-repaired/article 9bbeb260-432e-lle3-b57a-001a4bcf887a.html 

48. November 4, Bismarck Tribune - (North Dakota) Garrison Dam getting repairs. 
Repairs to the Garrison Dam, Pipestem Dam, and bank stabilization infrastructure are 
continuing in the areas near Jamestown, North Dakota, to repair damage caused by high 
waters and flooding in 2011. The U.S. Army Corps of Engineers estimated that repairs 
for more than 100 projects will total $234 million. 

Source: http://bismarcktribune.com/news/state-and-regional/garrison-dam-getting- 
repairs/article d0ef0930-4333-l Ie3-b963-001a4bcf887a.html 
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NTAS 



NO ACTIVE ALERTS 
www.DHS.gov/alerts 
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To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or visit 
their Web page at www.us-cert.gov . 
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